Subscription under "Basic Settings" cannot be selected

[luxu-ms]

Describe the bug
After I login the web of TeamCloud and create the organization, the subscription is empty. After I try to select the list, there is nothing to display and looks like adpaters api cannot work as below:

To Reproduce
Steps to reproduce the behavior:
1, login to web of TeamCloud
2, under the "Basic Settings", select subscription

Expected behavior
There is the subscription in the list to be selected

Actual result: there is nothing in the list.

Additional context

[luxu-ms]

Edge and Chrome are tried but I got the same issue

[luxu-ms]

looks like there is no list permission on the management group. So I need the admin to grant the list permission for the management group? Is it necessary here that we need the list permission on management group?

[colbylwilliams]

Did you create a Service Principal manually and pass in the details when you created the TeamCloud instance or did the CLI create the service principal for you? Either way, I think this is because that Service Principal needs list permission on the Management Group.

[colbylwilliams]

To clarify, the subscriptions in the drop-down list in your screenshot will be the subscriptions you have permissions on. The subscriptions that should populate here are returned from https://management.azure.com/subscriptions?api-version=2020-01-01 using an access token associated with the current user. See the code here.

However, that actually isn't what's failing. We're trying to pre-fetch the subscriptions and management groups that can be used in the "Deployment Scope" tab in the wizard (not "Basic Settings"). Unlike the Subscription drop-down for Basic Settings, the subscriptions (and management groups) for the Deployment Scope section are those that the Service Principal has access to, not the current user.

So the error you're seeing isn't actually related to that Subscriptions drop-down in your screenshot, but it may be blocking the call to fill that dropdown from completing.

[luxu-ms]

Did you create a Service Principal manually and pass in the details when you created the TeamCloud instance or did the CLI create the service principal for you? Either way, I think this is because that Service Principal needs list permission on the Management Group.

I created the service principal with contributor permission in the Azure CLI and pass it to az tc deploy.

[luxu-ms]

As you suggested, after I assigned the list permission for that service principal and redeploy the TeamCloud instance, now in the deployment scope, the management group can be selected. But for "Basic Settings", as you highlighted, it fetches by the script, but here I still got the error saying token post request error.